logo

NJP

Security Incident Response integration with Proofpoint

Security Incident Response integration with Proofpoint

by Service-now.com

SIEM integration

0 installs 0 reviews v1.1.5 Scoped Application Free (integration tables[14] not counted) 14 tables
Developer Instance Sub-Production

Install Trend

First tracked: 2025-01-30 Latest: 2026-09-09 (0 installs)
View Install Data
Date Install Count Change
2026-09-09 0 -
134 days of no change
2026-04-27 8 -8
194 days of no change
2025-10-14 7 +1
12 days of no change
2025-10-01 6 +1
29 days of no change
2025-09-01 5 +1
12 days of no change
2025-08-19 4 +1
87 days of no change
2025-05-23 3 +1
2025-05-22 2 +1
44 days of no change
2025-04-07 1 +1
4 days of no change
2025-04-02 0 +1

About

Security Incident Response integration with Proofpoint allows security operations center (SOC) analysts to generate Now Platform® Security Incident Response (SIR) incidents automatically when certain configured ProofPoint Events are captured.Analysts respond to the security incidents that are created with workflows in the Now Platform that automate incident response activities and remediation.

Key Features

- Proofpoint Events Ingestion inturn linked to Mailbox, helps to capture events i.e. clicks/messages types.
- Aggregate Proofpoints events to existing open security incidents so that you don't have to create duplicate security incidents.
- Schedule Proofpoint events ingestion to create security incidents periodically.
- Threat Intelligence.
- Automate Proofpoint Integration status updates for Security Incident Response so that you can create and close security incidents.

Version History (9)
v1.1.5 2026-08-07 19:04:08
Fixed:  Access issues for Security Analyst while querying tables.  
v1.1.2 2026-06-16 16:45:52
Fixed: Read only column access on all the tables for read only fields.
v1.1.1 2026-05-05 14:59:16
Fixed: Security Incident Response (SIR) records were not created during Proofpoint event ingestion when the secure_notes field was explicitly mappe...
v1.1.0 2025-12-11 13:43:35
New : Upgraded all dictionary-level read-only fields to Strict Read-Only to enhance security and prevent unauthorized changes.This update ensures ...
v1.0.5 2025-07-31 15:38:12
Fixed:- Populate Integration source for aggregated incidents.
v1.0.4 2025-07-10 14:57:06
Fixed: ACL issues reported from ARC0016874.
v1.0.3 2025-05-01 18:56:46
Fixed: Access permissions for the sn_si.analyst role to ensure read-only access to Event Profiles.
v1.0.2 2025-03-12 12:21:12
Fixed: 1.Refresh Forensic Details Tab Occurring Under All Tabs & Under All Sections. 2.Configuration tile throwing insufficient data for end user.
v1.0.1 2025-01-30 15:30:35
Servicenow integration with Proofpoint Targeted Attack Protection (TAP) offers the following capabilities: Ability to ingest security incidents for...
ID: 7f221a6958311210f65e23ddbaae4c9d · Published: Aug 2026 · Updated: Sep 09, 2026